Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/F67gDfZc4Jx2LCZVEE2FihPJzHw.roa
File: F67gDfZc4Jx2LCZVEE2FihPJzHw.roa (raw, json)
Hash identifier: yPyUtL/skPgjKLNjvoKJs7SdqhdnCeGN7LFhVgvBzCk=
Subject key identifier: 17:AE:E0:0D:F6:5C:E0:9C:76:2C:26:55:10:4D:85:8A:13:C9:CC:7C
Certificate issuer: /CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Certificate serial: 019420D638C01EA5E370B7862DF8170A9B0A
Authority key identifier: 6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/F67gDfZc4Jx2LCZVEE2FihPJzHw.roa
Signing time: Wed 01 Jan 2025 07:48:17 +0000
ROA not before: Wed 01 Jan 2025 07:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208144
IP address blocks: 45.157.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:38:c0:1e:a5:e3:70:b7:86:2d:f8:17:0a:9b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Validity
Not Before: Jan 1 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17aee00df65ce09c762c2655104d858a13c9cc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:53:85:bd:d8:ad:6a:48:8d:c7:39:24:5f:
3f:6f:18:0d:64:5a:6a:ab:84:5f:06:79:cc:f8:cc:
3b:b9:44:56:83:ee:3f:e5:4e:00:93:33:bd:7a:6a:
69:da:fd:5f:d2:66:c5:de:c2:83:31:be:28:46:43:
8e:ac:3d:37:7b:31:70:78:fd:8c:44:7c:f3:f7:0b:
34:62:b7:84:07:5f:5e:bd:42:6b:7e:10:6e:5d:ec:
03:c2:c2:38:ff:94:05:df:1f:c8:5a:20:d0:1f:10:
99:29:c0:a1:50:21:b1:c7:36:26:15:8b:49:52:3b:
29:fb:37:e7:53:f7:c4:19:bb:48:e7:7f:4e:09:fb:
1f:9c:97:43:ab:62:43:0a:18:d3:a6:50:53:94:83:
8b:10:4c:b3:68:7c:95:4f:76:89:95:5f:e7:d9:a6:
a4:67:e9:12:2f:ac:2b:0a:2b:54:49:c0:75:18:da:
93:37:9f:ec:4c:25:d7:f1:f8:44:a6:08:22:51:1c:
93:00:52:10:15:ca:5b:db:a6:4e:cb:84:18:3e:9c:
6d:fd:4b:f0:81:49:d3:c6:8b:74:70:ca:38:f0:2d:
8e:10:e9:d8:8f:b5:f0:c7:cc:cd:e1:95:fa:3d:0c:
70:00:27:4b:a3:3a:07:03:9a:54:c4:b2:c6:61:bf:
f8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AE:E0:0D:F6:5C:E0:9C:76:2C:26:55:10:4D:85:8A:13:C9:CC:7C
X509v3 Authority Key Identifier:
keyid:6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/F67gDfZc4Jx2LCZVEE2FihPJzHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.152.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:c6:96:11:de:46:f1:31:b5:4f:ee:4c:8a:e8:ee:69:c0:dc:
71:e1:1a:7b:3f:90:f1:ee:d8:ff:6a:0e:57:c3:b0:c3:80:c3:
8c:2f:46:89:60:e2:dd:80:dc:27:17:fd:ff:10:b1:43:35:6e:
91:6f:b4:fe:17:2e:18:c3:63:2c:04:5f:6b:2f:61:c5:48:56:
9b:61:5a:0b:77:a3:49:b2:f3:0a:bb:3b:2e:88:0b:1b:4b:d4:
10:4f:4a:b8:5b:36:11:df:74:50:24:77:24:5b:5e:2f:ed:a4:
a6:0b:cf:c2:b8:0a:48:77:75:02:8d:16:78:0f:a4:78:26:27:
42:4b:85:e7:df:85:75:e8:f0:90:a9:a1:20:7d:d7:27:1f:85:
0d:40:3f:27:c6:90:f6:ec:22:e0:04:85:90:e0:77:0b:2f:c8:
37:52:fe:ab:9a:1f:53:5c:94:ed:5d:4d:f5:fd:e2:12:4c:64:
da:9f:6b:7f:fe:d4:6b:12:3e:89:1a:a0:54:8b:b0:c3:fc:32:
cb:fe:66:ce:5b:f4:eb:0e:3e:80:3c:98:4b:a7:20:f9:6a:bd:
94:c9:f0:ba:15:aa:0d:b9:b4:9f:1c:4b:81:5d:34:8e:7f:62:
b7:71:49:3a:88:ae:63:d7:89:40:9a:9c:6c:45:07:34:d4:20:
98:45:cc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:03:41 2025 by rpki-client